@open-everywhere/core 0.1.0

package/dist/agent/tools/open_pull_request.js

@@ -0,0 +1,323 @@
+import { defineTool } from "eve/tools";
+import { windowGated } from "../access/window-gated.js";
+import { z } from "zod";
+import { bindFrom } from "../identity/binding.js";
+import { resolvePartition } from "../memory/partition.js";
+import { proposalScopeKey } from "../channels/propose-scope.js";
+import { principalIdOf, resolveAccessFor, unattendedOf } from "../access/request.js";
+import { untrustedIngestedThisTurn } from "../access/taint-signal.js";
+import { getGitHubApp, repoAllowed } from "../scm/provider.js";
+import { githubWorkMount } from "../scm/github-work.js";
+import { resolvePrWriteToken } from "../scm/write-token.js";
+import { isSafeBranchName, isSafeCheckoutDir, parseStagedSha, redactSecret, stagePushCommand } from "../scm/git.js";
+import { compileNetworkPolicy } from "../access/egress.js";
+import { resolveHeaders } from "../access/credentials.js";
+import { isEnforced } from "../access/enforcement.js";
+import { narrowByConnectorOverride } from "../access/connector-scope.js";
+import { mintGitReadBroker, mergeGitReadBroker, withBareAllowHost } from "../scm/broker.js";
+import { auditBrokeredEgressPolicy } from "../scm/broker-audit.js";
+import { useSelfHostEgress, pushEgressPolicy } from "../access/self-host-egress.js";
+import { requestApproval, autoApprovedNote } from "../approvals/flow.js";
+import { requireSessionContinuation } from "../spend/checkpoint.js";
+import { approvalPostDeps } from "./set_spend_limit.js";
+import { checkApprovalVenue, describeVenueRefusal, cardPostedPrefix, cardPostedTail } from "../approvals/card-venue.js";
+import { getConfig } from "../access/config.js";
+import { resolveNetworkAccessLevel } from "../access/network-access.js";
+import { executePrOpen } from "../approvals/pr-open.js";
+import { getOperationalStore } from "../operational/provider.js";
+import { haltScopeFor, resolveHalt } from "../access/halt.js";
+import { proposingSessionId } from "../identity/binding.js";
+import { markCardPostedThisTurn } from "../approvals/card-signal.js";
+import { bridgeSlackForm } from "../channels/slack-bridge.js";
+import { surfaceMessageOps } from "../channels/surface-message-ops.js";
+// The one consequential SCM write, gated on the OE approvals plane rather than eve-native HITL: a PR is audience-expanding, so it pauses for a human with STANDING on a durable card, which session-scoped eve HITL cannot check.
+// This is the PROPOSE half. It stage-pushes the head branch's exact sha to a hidden staging ref — no branch in the UI, no watcher notification, no branch CI — and freezes the proposal onto a card. Publication happens host-side on a member's click, pinned to the frozen sha, so the click can never publish commits the card did not show. A follow-up push to an existing PR branch flows through the same gate.
+/**
+ * MAY THE SESSION MEMO BE READ AT ALL? — the ONE decision that keeps this tool's pre-chain dispatch
+ * honest, named so it can be tested for what it is (its four inputs are hard to reach through a live
+ * `execute`, and this is the finding a reviewer is most likely to lose).
+ *
+ * All three conjuncts are refusals to take the shortcut, and each has its own reason:
+ *  • no session ⇒ there is no memo to read;
+ *  • TAINTED ⇒ a turn that read external content must earn a fresh human card, so a poisoned turn
+ *    cannot ride an earlier session grant;
+ *  • HALTED (OPE-1602) ⇒ this is the ONE path in `agent/tools/**` that dispatches a gated act before
+ *    `requestApproval`, so the approver chain's halt arrow cannot see it. Falling through to the
+ *    chain — rather than refusing here — is what keeps ONE refusal path and one audit shape.
+ *
+ * FALSE means "fall through to `requestApproval`", never "refuse": the chain decides.
+ */
+export function sessionMemoAdmissible(input) {
+    return Boolean(input.sessionId) && !input.tainted && !input.halted;
+}
+/** Post a short, non-blocking note onto the proposing surface (the session-skip has no card). Slack
+ *  uses the bot chat.postMessage; Discord a channel create-message. Best-effort — never throws. */
+async function postSessionNote(platform, channelId, threadTs, text) {
+    const ops = surfaceMessageOps(platform);
+    if (ops) {
+        await ops.postText(channelId, text).catch(() => { });
+        return;
+    }
+    const body = new URLSearchParams();
+    body.set("channel", channelId);
+    if (threadTs)
+        body.set("thread_ts", threadTs);
+    body.set("text", text);
+    await bridgeSlackForm("chat.postMessage", body.toString()).catch(() => { });
+}
+export default windowGated("open_pull_request", defineTool({
+    description: "PROPOSE pushing your committed branch and opening a GitHub pull request for it (this is the ONLY way changes leave the workspace — plain `git push` is not authorized). Commit on the head branch in the checkout first. This does NOT open the PR: your commits are parked on a hidden staging ref and an approval card posts with the exact repo, branches, commit and description — the branch and PR publish only when a human approves. Write a clear body: what changed, why, how you verified it, and link the request that prompted it. If a PR is already open for that branch, approval updates it with your new commits instead. The posted card IS the reply — do not add narration after this call. EXCEPT when this surface can't host a card: it then goes to a card-capable channel in the same domain, the `message` field names it, and you MUST relay that.",
+    inputSchema: z.object({
+        repo: z.string().describe("Target repository as 'owner/repo'."),
+        head: z.string().describe("The branch containing the changes (must exist in the checkout)."),
+        base: z.string().default("main").describe("The branch to merge into."),
+        title: z.string().describe("PR title."),
+        body: z.string().describe("PR description (markdown)."),
+        dir: z.string().optional().describe("Workspace-relative checkout directory to push from (default: the repo name)."),
+    }),
+    outputSchema: z.object({
+        ok: z.boolean(),
+        repo: z.string(),
+        head: z.string(),
+        // Gated: nothing is published yet — an approval card was posted for a human to confirm.
+        pending: z.boolean(),
+        pendingId: z.string().optional(),
+        message: z.string(),
+        autoApproved: z.boolean().optional().describe("The approver chain lowered this verb: no card was posted and it has ALREADY run."),
+    }),
+    async execute(input, ctx) {
+        // SOFT session cost checkpoint (OPE-62): if this session has crossed a configured cost
+        // threshold and holds no continue grant, pause here (post a "keep going?" card once + throw a
+        // recoverable error) BEFORE any staging push touches the remote. No-op when unconfigured.
+        await requireSessionContinuation(ctx, "open_pull_request");
+        // Fail-closed repo gate — the SAME boundary checkout_repo enforces. Human approval is a second gate, not the only one.
+        // Without this, a PAT fallback could target ANY repo the token reaches, so "the bundle is the boundary" must hold on the consequential write too, not just on checkout.
+        const access = resolveAccessFor(ctx);
+        if (!repoAllowed(input.repo, access.repos)) {
+            throw new Error(`repo "${input.repo}" is not granted to this channel. Allowed: ${access.repos.length ? access.repos.join(", ") : "(none)"}. ` +
+                `Grant it via a bundle's repos (see agent/access/bundles.ts).`);
+        }
+        // Both go into the push shell command — same hard validation as checkout_repo.
+        if (!isSafeBranchName(input.head)) {
+            throw new Error(`invalid head branch "${input.head}" — use a simple branch name (e.g. fix/issue-123).`);
+        }
+        const dir = input.dir ?? input.repo.split("/")[1];
+        if (!isSafeCheckoutDir(dir)) {
+            throw new Error(`invalid checkout dir "${dir}" — use a simple workspace-relative path.`);
+        }
+        // GATE plumbing, fail-closed BEFORE anything touches the remote — same posture as
+        // create_skill: no verified sender, or no venue to host the approval, and nothing may be
+        // staged for it either.
+        const binding = bindFrom(ctx);
+        const p = resolvePartition(ctx);
+        // 🔴 THE ROOM THAT ASKED, NOT THE ROOM THAT ARRIVED LAST (OPE-1756). `p` above is the TURN's
+        // partition, and a turn that merged queued deliveries carries only the LAST delivery's auth —
+        // so on a turn answering two rooms it names the wrong one. The GOVERNED scope follows the
+        // ADDRESSED wake instead, through the same road the reply path uses; it falls back to `p` on
+        // every unknown, so a single-wake turn is unchanged.
+        // 🔴 THE MERGE ROAD IS UNREACHABLE ON eve 0.54.3; THIS READ IS STILL LIVE (OPE-2042). eve batches
+        // adjacent queued deliveries only when their full auth contexts match, and OE stamps a fresh
+        // per-delivery `oe_delivery_id` into `auth.attributes`, so two auth-carrying deliveries on one
+        // unified window never compare equal; only the caller-less task COMPLETION COHORT still folds,
+        // and it carries no `auth` at all. But the TURN's ctx names the wrong room WITHOUT any merge
+        // too: a turn woken by an INTERNAL wake — an approval decision, a completion — answers a
+        // conversation whose envelope is in the seat's shared context, through the reply fence's
+        // same-conversation and pending arms (`channels/unified-window.ts` `resolveAnswerableReplyTarget`,
+        // arms 3 and 4). Measured in production on 2026-08-15 (`docs/glossary.md`). So this read is
+        // LOAD-BEARING, not defensive. `scripts/coalesced-delivery-merge-assumption-test.ts` pins only
+        // the merge road's impossibility.
+        // 🔴 WHAT MOVES IS THE GOVERNANCE KEY ONLY. Anything else this tool derives from `p` — the memory
+        // tier, the card's venue walk, and any surface key frozen into the proposal's own `args` — keeps
+        // reading the TURN's partition, deliberately: those name what the act DOES and where this seat
+        // lives, while the scope key names who may approve it and which halt covers it. Moving the act's
+        // own target is a design choice this task does not hold.
+        const proposeScopeKey = await proposalScopeKey(ctx, p);
+        // principal-gate: accountability — the card's PROPOSER line. A routine that opens a PR is a shipped
+        // capability, so refusing an unattended turn here would delete it; the unattended bound is grain
+        // (a wide-hands row) plus a review surface no other carded verb has.
+        //
+        // 🔴 THE INCONSISTENCY WITH create_skill/delete_skill IS DELIBERATE (OPE-278) — do not "fix" it. Those
+        // two became `presence` gates because an approved skill ARMS ON THE CLICK ALONE: one person reading a
+        // body on a card is the entire review, and what they arm is trusted text every later turn follows. A PR
+        // arms on nothing. It is a proposal into a pipeline with THREE further independent checks after the card
+        // — a merge decision by someone who is not the clicker, CI, and the config-diff gate on anything that
+        // changes what the agent may do (OPE-255) — so the fire's proposal cannot become an effect without
+        // people who never saw this session agreeing to it. The distinction is REVIEW SURFACE, not consequence
+        // size, and it is what makes an unattended PR the one carded write worth keeping.
+        const requestedBy = principalIdOf(ctx);
+        if (!requestedBy) {
+            throw new Error("open_pull_request needs a verified sender to gate the publish — no principal id resolved, so there's no proposer to show on the approval card.");
+        }
+        // Where the card goes: this room when it can host one, otherwise a card-capable channel in the SAME domain.
+        // Resolved BEFORE the staging push, the same fail-closed-first posture the old card-path check had: nothing is staged for a request that has nowhere to land its card.
+        const venueResult = await checkApprovalVenue(binding, p, () => getConfig().loadDomains());
+        if ("refusal" in venueResult) {
+            throw new Error(describeVenueRefusal(venueResult.refusal, binding.platform, "publish that PR"));
+        }
+        const venue = venueResult.venue;
+        // The ORIGIN room's channel id, best-effort and non-throwing, used only for the session-skip note below — a short "already approved" line posted back into the room that asked.
+        // It is independent of where the CARD lands. Absent on a channel-less origin, the note is skipped rather than thrown on.
+        const originChannelId = typeof binding.target?.channelId === "string" ? binding.target.channelId : undefined;
+        // OPE-1794: the staging push carries the repo's DECLARED capabilities, exactly as the publish
+        // half does. This mint used to send the bare default set, so a domain that named the `workflows`
+        // capability could not propose a branch touching `.github/workflows/**`: GitHub refused this
+        // push and no card ever posted. Read ONCE here and reused for the frozen card args below, so the
+        // two can no longer disagree about what this repo was opted into.
+        const repoCapabilities = access.repoCapabilities[input.repo] ?? [];
+        const token = await resolvePrWriteToken(input.repo, repoCapabilities);
+        // Stages the head branch's exact sha on the hidden staging ref in one shot: the write token rides inline in this single command and is never persisted to git config, so the checkout's stored credential stays read-only.
+        // Nothing is published — no branch, no PR, no CI, no watcher notification — and re-proposing simply re-stages within our own staging namespace, so a revised proposal is harmless.
+        let sandbox;
+        try {
+            sandbox = await ctx.getSandbox();
+        }
+        catch (err) {
+            throw new Error(`no workspace to push from (${err instanceof Error ? err.message : String(err)}). ` +
+                `checkout_repo the repo, commit on "${input.head}", then retry.`);
+        }
+        // checkout_repo installs the READ installation token as a firewall header TRANSFORM over all github.com traffic, which OVERRIDES this push's inline write token and makes the push arrive read-authenticated. So for this ONE command the stamp is lifted off github.com, and restored in a finally.
+        // The window is safe because the write token never becomes a firewall header — it stays in the git process's argv, so no standing write credential exists for concurrent sandbox code to reach. Lifting the read stamp only leaves ordinary unauthenticated github.com requests, which sandbox code can always make.
+        const brokerApp = getGitHubApp();
+        let brokered = null;
+        if (isEnforced() && brokerApp) {
+            // OPE-311: same override-narrowing dep the egress hook passes, so a mid-session
+            // break-glass connector revoke reaches this recompile too. OPE-509: also thread the
+            // resolved network-access level, for the same reason checkout_repo.ts does.
+            const basePolicy = await compileNetworkPolicy(access, resolveHeaders, (ids) => narrowByConnectorOverride(ctx, ids), resolveNetworkAccessLevel(access, getConfig().loadNetworkAccess?.() ?? []));
+            const { rulesByOwner } = await mintGitReadBroker(brokerApp, access.repos);
+            brokered = mergeGitReadBroker(basePolicy, rulesByOwner);
+        }
+        // OPE-1448: every apply on this path gets its own `egress.policy` row, appended AFTER the apply
+        // returns (both arms throw on failure, so reaching the audit is what makes the row's
+        // `enforced: true` honest). Both states are real and BOTH are rowed: the swap that lifts the
+        // read stamp off github.com for the staging push, and the re-arm that restores the brokered
+        // policy. See scm/broker-audit.ts for why this path never deduplicates by fingerprint.
+        const applyPolicy = async (policy, reason) => {
+            if (useSelfHostEgress())
+                await pushEgressPolicy(policy);
+            else
+                await sandbox.setNetworkPolicy(policy);
+            await auditBrokeredEgressPolicy(ctx, access, policy, reason);
+        };
+        let push;
+        try {
+            if (brokered)
+                await applyPolicy(withBareAllowHost(brokered, "github.com"), "open_pull_request.push");
+            push = await sandbox.run({ command: stagePushCommand(dir, token, input.head) });
+        }
+        finally {
+            if (brokered) {
+                try {
+                    // Re-arm the read broker (re-applying the WHOLE brokered policy — the swap only
+                    // changed github.com). Runs on every exit path, including a failed swap above.
+                    await applyPolicy(brokered, "open_pull_request.restore");
+                }
+                catch (restoreErr) {
+                    // FAIL CLOSED: the read-broker stamp was lifted off github.com and could not be re-armed, so this must not be swallowed.
+                    // No standing write credential ever existed as a firewall header, so nothing privileged leaks — but github.com is left on a bare allow until the next SCM call re-arms it, which is a degraded firewall state the operator must see rather than have pass silently.
+                    throw new Error(`open_pull_request: could not restore the git read-broker egress policy after the staging push — ` +
+                        `github.com is left on a bare allow (no firewall-injected credential) until the next SCM call re-arms it. ` +
+                        `This is a degraded firewall state that must be investigated: ${restoreErr instanceof Error ? restoreErr.message : String(restoreErr)}`);
+                }
+            }
+        }
+        const headSha = push.exitCode === 0 ? parseStagedSha(push.stdout ?? "") : null;
+        if (push.exitCode !== 0 || !headSha) {
+            throw new Error(`staging push of "${input.head}" from ${dir}/ failed — is the repo checked out there (checkout_repo) with that branch committed? ` +
+                redactSecret(push.stderr || push.stdout || "unknown error", token).slice(0, 500));
+        }
+        // Freeze the proposal and post the card. The frozen headSha is the content pin —
+        // the click publishes exactly these commits or fails.
+        const tainted = untrustedIngestedThisTurn();
+        const sessionId = proposingSessionId(ctx);
+        const args = {
+            org: p.org,
+            scopeKey: proposeScopeKey,
+            repo: input.repo,
+            head: input.head,
+            base: input.base,
+            title: input.title,
+            body: input.body,
+            headSha,
+            requestedBy,
+            tainted,
+            // OPE-1024: freeze the capability sets THIS scope's binding opted this repo into. Absent from
+            // the map ⇒ no expansion ⇒ the default write job set, which is every bare-string repo grant.
+            // The SAME read the staging mint above used.
+            ...(repoCapabilities.length ? { capabilities: repoCapabilities } : {}),
+            ...(sessionId ? { sessionId } : {}),
+        };
+        // Session skip: when this session already carries a live "Approve for session" grant for `pr.open`, publishing goes through the same execute path an approve click takes, attributed to the original granting member, with a short non-blocking channel note instead of a card.
+        // A TAINTED proposal is NEVER auto-skipped — reading external content this turn forces a fresh human card, as a defence against a poisoned turn riding an earlier session grant. Scoping by session rather than by repo is safe because the repo gate above already bound what this can target.
+        // 🔴 A HALT CLOSES THIS BYPASS (OPE-1602). This is the ONE path in `agent/tools/**` that
+        // dispatches a gated act BEFORE `requestApproval` and therefore around the approver chain — so
+        // the chain's halt arrow, which covers the other 22 gated verbs, cannot see it. Without this
+        // line a live session memo would publish a pull request during a halt. The fix is to fall
+        // THROUGH to the chain rather than to refuse here: the chain then denies it with the halt
+        // arrow's own reason and writes the same `approval.chain` row every other refused verb writes,
+        // so there is one refusal path and one audit shape, not a second one that has to agree.
+        // Fail-closed with the rest of the plane — an unreadable halt store falls through too.
+        const halt = await resolveHalt(haltScopeFor({ org: p.org, scopeKey: proposeScopeKey, principalId: requestedBy }));
+        const store = getOperationalStore();
+        const memo = sessionMemoAdmissible({ sessionId, tainted, halted: halt.halted })
+            ? await store.getSessionApproval(p.org, sessionId, "pr.open", new Date().toISOString()).catch(() => null)
+            : null;
+        if (memo) {
+            const outcome = await executePrOpen(args, memo.grantedBy, {}, { sessionApproved: true });
+            // Best-effort, and ONLY into the origin room (this note is unrelated to the card venue — it
+            // is a short "already approved" confirmation for whoever is here): skipped, never thrown on,
+            // when the origin has no channel id at all.
+            if (originChannelId) {
+                await postSessionNote(binding.platform, originChannelId, binding.threadTs ?? null, `${outcome}\n-# session-approved by <@${memo.grantedBy}>`);
+            }
+            markCardPostedThisTurn(); // the note is the reply — suppress the model's redundant narration, like the card path
+            return {
+                ok: true,
+                repo: input.repo,
+                head: input.head,
+                pending: false,
+                message: `session-approved (by ${memo.grantedBy}) — published without a card: ${outcome}`,
+            };
+        }
+        const posted = await requestApproval({
+            org: p.org,
+            kind: "pr.open",
+            args,
+            scopeKey: proposeScopeKey,
+            domain: null,
+            requestedBy,
+            channelId: venue.channelId,
+            threadTs: venue.sameRoom ? binding.threadTs ?? null : null,
+            // Mint-frozen proposing-surface identity (task #105) — the TTL sweep's feedback target,
+            // and the VENUE's key because that is where the card actually is.
+            postedTo: venue.surfaceKey,
+            // OPE-296 P3: the chain's unattended signal — a fire (no ACTING sender) must deny fast on an
+            // undeclared gate rather than post a card into an empty room (ask-unattended; feeds OPE-297).
+            chain: { unattended: unattendedOf(ctx) },
+        }, approvalPostDeps(venue.platform, ctx));
+        const subject = `PR "${input.title}" (${input.repo}: ${input.head} → ${input.base}, commit ${headSha.slice(0, 12)})${tainted ? " ⚠ tainted" : ""}`;
+        // Chain-lowered (OPE-296) ⇒ no card, the PR is already open (its number/url is in the outcome).
+        if (posted.autoApproved) {
+            return {
+                ok: true,
+                repo: input.repo,
+                head: input.head,
+                pending: false,
+                autoApproved: true,
+                pendingId: posted.id,
+                message: autoApprovedNote(subject, posted.autoApproved),
+            };
+        }
+        return {
+            ok: true,
+            repo: input.repo,
+            head: input.head,
+            pending: true,
+            pendingId: posted.id,
+            message: `${cardPostedPrefix(venue)} — ${subject} awaiting a human to approve the publish (pending ${posted.id}).${cardPostedTail(venue, "approve the publish", posted)}`,
+        };
+    },
+    // MOUNT ON THE GRANT (OPE-940), not on the grain alone: a seat whose scope grants no repo can open
+    // no PR, so it does not see this tool. scm/github-work.ts carries the fail-open reasoning.
+}), githubWorkMount);
+//# sourceMappingURL=open_pull_request.js.map

package/dist/agent/tools/open_pull_request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open_pull_request.js","sourceRoot":"","sources":["../../../agent/tools/open_pull_request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEpH,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAA0B,MAAM,wBAAwB,CAAC;AAE3F,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACxH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,aAAa,EAAmB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE,kOAAkO;AAClO,uZAAuZ;AAEvZ;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA2F;IAC/H,OAAO,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;AACrE,CAAC;AAED;mGACmG;AACnG,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,SAAiB,EAAE,QAAuB,EAAE,IAAY;IACvG,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/B,IAAI,QAAQ;QAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvB,MAAM,eAAe,CAAC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,eAAe,WAAW,CAAC,mBAAmB,EAAE,UAAU,CAAC;IACzD,WAAW,EACT,g1BAAg1B;IACl1B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC/D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;QAC5F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QACtE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACvD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;KACpH,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,wFAAwF;QACxF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kFAAkF,CAAC;KAClI,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,uFAAuF;QACvF,8FAA8F;QAC9F,0FAA0F;QAC1F,MAAM,0BAA0B,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC3D,uHAAuH;QACvH,wKAAwK;QACxK,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,SAAS,KAAK,CAAC,IAAI,8CAA8C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI;gBAC3H,8DAA8D,CACjE,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,oDAAoD,CAAC,CAAC;QAC1G,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,2CAA2C,CAAC,CAAC;QAC3F,CAAC;QAED,kFAAkF;QAClF,yFAAyF;QACzF,wBAAwB;QACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAChC,6FAA6F;QAC7F,8FAA8F;QAC9F,0FAA0F;QAC1F,6FAA6F;QAC7F,qDAAqD;QACrD,kGAAkG;QAClG,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,6FAA6F;QAC7F,yFAAyF;QACzF,yFAAyF;QACzF,mGAAmG;QACnG,4FAA4F;QAC5F,+FAA+F;QAC/F,kCAAkC;QAClC,kGAAkG;QAClG,iGAAiG;QACjG,+FAA+F;QAC/F,iGAAiG;QACjG,yDAAyD;QACzD,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvD,oGAAoG;QACpG,iGAAiG;QACjG,qEAAqE;QACrE,EAAE;QACF,uGAAuG;QACvG,sGAAsG;QACtG,wGAAwG;QACxG,yGAAyG;QACzG,sGAAsG;QACtG,mGAAmG;QACnG,uGAAuG;QACvG,kFAAkF;QAClF,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gJAAgJ,CAAC,CAAC;QACpK,CAAC;QAED,4GAA4G;QAC5G,uKAAuK;QACvK,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1F,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QAChC,gLAAgL;QAChL,yHAAyH;QACzH,MAAM,eAAe,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7G,8FAA8F;QAC9F,iGAAiG;QACjG,6FAA6F;QAC7F,iGAAiG;QACjG,kEAAkE;QAClE,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAEtE,2NAA2N;QAC3N,mLAAmL;QACnL,IAAI,OAAmD,CAAC;QACxD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK;gBACjF,sCAAsC,KAAK,CAAC,IAAI,gBAAgB,CACnE,CAAC;QACJ,CAAC;QACD,qSAAqS;QACrS,qTAAqT;QACrT,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,IAAI,QAAQ,GAAgC,IAAI,CAAC;QACjD,IAAI,UAAU,EAAE,IAAI,SAAS,EAAE,CAAC;YAC9B,gFAAgF;YAChF,oFAAoF;YACpF,4EAA4E;YAC5E,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAC3C,MAAM,EACN,cAAc,EACd,CAAC,GAAG,EAAE,EAAE,CAAC,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,EAC5C,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,CAAC,CAC3E,CAAC;YACF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1E,QAAQ,GAAG,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1D,CAAC;QACD,gGAAgG;QAChG,qFAAqF;QACrF,6FAA6F;QAC7F,4FAA4F;QAC5F,uFAAuF;QACvF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA4B,EAAE,MAAyB,EAAiB,EAAE;YACnG,IAAI,iBAAiB,EAAE;gBAAE,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;;gBACnD,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,yBAAyB,CAAC,GAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAClF,CAAC,CAAC;QAEF,IAAI,IAA6C,CAAC;QAClD,IAAI,CAAC;YACH,IAAI,QAAQ;gBAAE,MAAM,WAAW,CAAC,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,wBAAwB,CAAC,CAAC;YACrG,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;gBAAS,CAAC;YACT,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,gFAAgF;oBAChF,+EAA+E;oBAC/E,MAAM,WAAW,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;gBAC3D,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,yHAAyH;oBACzH,oQAAoQ;oBACpQ,MAAM,IAAI,KAAK,CACb,kGAAkG;wBAChG,2GAA2G;wBAC3G,gEAAgE,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAC1I,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,oBAAoB,KAAK,CAAC,IAAI,UAAU,GAAG,uFAAuF;gBAChI,YAAY,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CACnF,CAAC;QACJ,CAAC;QAED,iFAAiF;QACjF,sDAAsD;QACtD,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAe;YACvB,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO;YACP,WAAW;YACX,OAAO;YACP,8FAA8F;YAC9F,6FAA6F;YAC7F,6CAA6C;YAC7C,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;QAEF,gRAAgR;QAChR,gSAAgS;QAChS,yFAAyF;QACzF,+FAA+F;QAC/F,6FAA6F;QAC7F,0FAA0F;QAC1F,0FAA0F;QAC1F,+FAA+F;QAC/F,wFAAwF;QACxF,uFAAuF;QACvF,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,qBAAqB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7E,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,EAAE,SAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAC1G,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YACzF,4FAA4F;YAC5F,6FAA6F;YAC7F,4CAA4C;YAC5C,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,GAAG,OAAO,8BAA8B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;YAChJ,CAAC;YACD,sBAAsB,EAAE,CAAC,CAAC,uFAAuF;YACjH,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,wBAAwB,IAAI,CAAC,SAAS,iCAAiC,OAAO,EAAE;aAC1F,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;YACE,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,IAAI,EAAE,SAAS;YACf,IAAI;YACJ,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,IAAI;YACZ,WAAW;YACX,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;YAC1D,wFAAwF;YACxF,kEAAkE;YAClE,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,6FAA6F;YAC7F,8FAA8F;YAC9F,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE;SACzC,EACD,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CACtC,CAAC;QAEF,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,YAAY,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACnJ,gGAAgG;QAChG,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,OAAO,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;aACxD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,OAAO,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,OAAO,qDAAqD,MAAM,CAAC,EAAE,KAAK,cAAc,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,CAAC,EAAE;SAC1K,CAAC;IACJ,CAAC;IACH,mGAAmG;IACnG,2FAA2F;CAC1F,CAAC,EAAE,eAAe,CAAC,CAAC"}

package/dist/agent/tools/permission_fit_report.d.ts

@@ -0,0 +1,63 @@
+declare const _default: import("eve/tools").ToolDefinition<{
+    days?: number | undefined;
+    direction?: "both" | "tighten" | "widen" | undefined;
+}, {
+    domain: string;
+    window: {
+        since: string;
+        until: string;
+        days: number;
+    };
+    rowsConsidered: number;
+    truncated: boolean;
+    grantsExamined: number;
+    proposals: {
+        id: string;
+        direction: "tighten" | "widen";
+        subject: string;
+        summary: string;
+        evidence: string[];
+        diff?: string | undefined;
+        remedy?: string | undefined;
+    }[];
+    repoCapabilities: {
+        repo: string;
+        capability: string;
+        declared: boolean;
+        installationSupports: "no" | "unreported" | "yes";
+    }[];
+    report: string;
+}> & {
+    execute(input: {
+        days?: number | undefined;
+        direction?: "both" | "tighten" | "widen" | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        domain: string;
+        window: {
+            since: string;
+            until: string;
+            days: number;
+        };
+        rowsConsidered: number;
+        truncated: boolean;
+        grantsExamined: number;
+        repoCapabilities: {
+            repo: string;
+            capability: "pr-admin" | "workflows";
+            declared: boolean;
+            installationSupports: "yes" | "no" | "unreported";
+        }[];
+        proposals: {
+            id: string;
+            direction: "tighten" | "widen";
+            subject: string;
+            summary: string;
+            evidence: string[];
+            diff?: string | undefined;
+            remedy?: string | undefined;
+        }[];
+        report: string;
+    }>;
+};
+export default _default;
+//# sourceMappingURL=permission_fit_report.d.ts.map

package/dist/agent/tools/permission_fit_report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission_fit_report.d.ts","sourceRoot":"","sources":["../../../agent/tools/permission_fit_report.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAuKgB,KAAK;YAAgB,KAAK;YAAgB,IAAI;;;;;;;;;kCAQ8B,KAAK,GAAG,IAAI,GAAG,YAAY"}

package/dist/agent/tools/permission_fit_report.js

@@ -0,0 +1,173 @@
+// Permission homeostasis, the surfacing half: are this domain's grants still the right size, in both directions, read from the audit log. 🔴 It PROPOSES; it never actuates and it never gates. No config is written, no grant changes, no live verdict moves, and nothing is blocked or delayed by running it or by not running it — the only actuator is a reviewed config PR, and merge is the privilege gate.
+// Its whole output vocabulary is grants and counts with NO principal anywhere, which is what lets an UNATTENDED routine run the tightening scan. The scope gate is domain grain and only domain grain: resolving the caller's channel to a memory domain IS the gate, and it holds on a fire because there is no principal to require. `explain_permission` is the prospective, per-verb sibling; this one is retrospective and per-grant.
+import { defineTool } from "eve/tools";
+import { never } from "eve/tools/approval";
+import { z } from "zod";
+import { bundleConnectorNames } from "../access/bundle.js";
+import { getConfig } from "../access/config.js";
+import { resolveAccessFor } from "../access/request.js";
+import { resolveSkillDomainDetailed } from "../skills/domain-skills.js";
+import { reportDomainRefusalMessage } from "../spend/reporting.js";
+import { resolvePartition } from "../memory/partition.js";
+import { domainForChannel } from "../memory/domain.js";
+import { readAudit } from "../audit/audit.js";
+import { auditToolAction } from "../audit/tool-action.js";
+import { MIN_TIGHTEN_OBSERVATIONS, MIN_TIGHTEN_WINDOW_DAYS, makeWindow, permissionEvidence, } from "../access/permission-evidence.js";
+import { proposePermissionChanges, renderPermissionProposals } from "../access/permission-proposal.js";
+import { getGitHubApp } from "../scm/provider.js";
+import { repoCapabilityRows, renderRepoCapabilityRows, repoOwner } from "../scm/capability-fit.js";
+/**
+ * The audit actions the two loops read. Narrow reads beat one unfiltered sweep: the store filters `action` server-side, so the process never holds rows it has no question for.
+ * `egress.denied` is the only TIER-CONDITIONAL one — those rows exist only where the proxy is ours — and reading an action that is always empty on one tier is what stops the egress section meaning two different things depending on where it runs. The two non-refusal actions are the ARRIVAL side of the empty-room refusal, without which the loop cannot see its own proposal being actioned.
+ */
+const EVIDENCE_ACTIONS = [
+    "aws.exec",
+    "aws.refused",
+    "connector.op",
+    "connector.refused",
+    "connector.unattended_lift",
+    "routine.permission_granted",
+    "approval.chain",
+    "egress.denied",
+];
+/**
+ * Per-action row cap: generous enough that a busy month fits, bounded enough that a pathological window cannot pull an unbounded result set into a lambda.
+ * Truncation is REPORTED, never silent — a truncated window UNDER-counts usage, which biases the tightening loop toward proposing a cut on a grant that was in fact busy, and that is exactly the error a reader must be told about.
+ */
+const ROW_CAP = 4000;
+/** How many distinct repo OWNERS this report will read installation permissions for (OPE-1024).
+ *  One live GitHub call each, so the cap keeps a wide grant from turning a report into a fan-out.
+ *  Owners past the cap are simply absent from the join and report as "unreported". */
+const MAX_INSTALLATION_PROBES = 10;
+export default defineTool({
+    description: "Report whether this domain's PERMISSION GRANTS still fit the work — in both directions, from the audit log. Widening: unattended runs that keep hitting refusals (an AWS allow-list refusal, an approval card nobody could answer, a host the egress firewall keeps blocking, a connector this scope was never granted). Tightening: grants nothing exercised in the window, and allow-lists far wider than what was actually run. Returns evidence counts plus concrete, reviewable config-change proposals. It proposes only: nothing is granted, revoked, gated or delayed by this — every proposal is a pull request a human merges. Use when asked \"do we still need all this access?\", \"why does this routine keep getting refused?\", or on a schedule as a standing permission review. For \"would tool X be allowed here right now?\" use explain_permission instead.",
+    inputSchema: z.object({
+        days: z.number().int().min(1).max(90).optional().describe(`Window length in days (default 30). Tightening proposals need at least ${MIN_TIGHTEN_WINDOW_DAYS} days; shorter windows report widening evidence only.`),
+        direction: z.enum(["both", "widen", "tighten"]).optional().describe("Which loop to report. Default \"both\"."),
+    }),
+    outputSchema: z.object({
+        domain: z.string(),
+        window: z.object({ since: z.string(), until: z.string(), days: z.number() }),
+        rowsConsidered: z.number(),
+        truncated: z.boolean().describe("A per-action row cap was hit — usage is UNDER-counted, so treat any tightening proposal as unproven and re-run over a shorter window."),
+        grantsExamined: z.number(),
+        proposals: z.array(z.object({
+            id: z.string(),
+            direction: z.enum(["widen", "tighten"]),
+            subject: z.string(),
+            summary: z.string(),
+            evidence: z.array(z.string()),
+            diff: z.string().optional().describe("The proposed config change, rendered. Absent when the actuator is not a config-file diff — `remedy` then says what it is."),
+            remedy: z.string().optional(),
+        })),
+        repoCapabilities: z
+            .array(z.object({ repo: z.string(), capability: z.string(), declared: z.boolean(), installationSupports: z.enum(["yes", "no", "unreported"]) }))
+            .describe("Per (repo, named capability set): whether this domain's binding already opted in, and whether the App installation can honour it. Proposal input — nothing here grants anything."),
+        report: z.string().describe("The whole thing as readable text — post this."),
+    }),
+    approval: never(),
+    async execute(input, ctx) {
+        const bindable = ctx;
+        const partition = resolvePartition(bindable);
+        const resolved = resolveSkillDomainDetailed(bindable);
+        if (resolved.domain === null)
+            throw new Error(reportDomainRefusalMessage(resolved.reason));
+        const domain = resolved.domain;
+        const days = input.days ?? 30;
+        const window = makeWindow(days, new Date());
+        // `EffectiveAccess` reports the RESOLVED grant set but not which binding won — the resolver dedupes a grant across bundles and keeps no provenance — so the declaring bundle is recovered by name lookup over the loaded config.
+        // Where several bundles declare the same grant, the proposal names all of them and the reviewer picks.
+        const access = resolveAccessFor(bindable);
+        const effectiveArns = new Set(access.awsRoles.map((r) => r.roleArn));
+        const effectiveConnectors = new Set(access.connectors);
+        const bundles = getConfig().loadBundles();
+        const grants = bundles
+            .map((b) => ({
+            bundle: b.name,
+            awsRoles: (b.awsRoles ?? [])
+                .filter((r) => effectiveArns.has(r.roleArn))
+                .map((r) => ({ roleArn: r.roleArn, allow: r.allow })),
+            // Slugs, not grants: the evidence join is "which connector did this bundle declare that
+            // this scope actually holds", and a contentOrigin declaration (OPE-339) says nothing about USE.
+            connectors: bundleConnectorNames(b).filter((c) => effectiveConnectors.has(c)),
+        }))
+            .filter((g) => g.awsRoles.length > 0 || g.connectors.length > 0);
+        // The evidence rows: org-scoped by the store, then domain-scoped in process.
+        const domains = getConfig().loadDomains();
+        const inThisDomain = (row) => {
+            const detailDomain = row.detail?.domain;
+            if (typeof detailDomain === "string" && detailDomain.length > 0)
+                return detailDomain === domain;
+            if (row.surface === undefined)
+                return false;
+            return domainForChannel(`${row.platform}/${row.workspace}/${row.surface}`, domains)?.name === domain;
+        };
+        let truncated = false;
+        const rows = [];
+        for (const action of EVIDENCE_ACTIONS) {
+            const page = await readAudit({ org: partition.org, action, since: window.since, limit: ROW_CAP });
+            if (page.length >= ROW_CAP)
+                truncated = true;
+            for (const row of page)
+                if (inThisDomain(row))
+                    rows.push({ ts: row.ts, action: row.action, detail: row.detail });
+        }
+        // The one implementation point for "can the App installation honour an expansion?". There is no deploy gate and no boot check by design — the mint-time 403 and its audit row are the always-on backstop for drift, and answering here keeps the question inside a concrete config-change ask.
+        // Fail-soft throughout: an owner that cannot be read reports "unreported", never a refusal, and this section never gates the rest of the report.
+        const app = getGitHubApp();
+        const owners = [...new Set(access.repos.map(repoOwner).filter((o) => o !== ""))].slice(0, MAX_INSTALLATION_PROBES);
+        const grantedByOwner = {};
+        const installationIdByOwner = {};
+        for (const owner of owners) {
+            grantedByOwner[owner] = app ? await app.installationPermissions(owner).catch(() => undefined) : undefined;
+            installationIdByOwner[owner] = app?.installationFor(owner);
+        }
+        const capabilityRows = repoCapabilityRows(access.repos, access.repoCapabilities, grantedByOwner);
+        const evidence = permissionEvidence(rows, grants, window);
+        const proposals = proposePermissionChanges(evidence, input.direction ?? "both");
+        let report = renderPermissionProposals(evidence, proposals);
+        report += `\n\n## GitHub repo capability sets\n${renderRepoCapabilityRows(capabilityRows, installationIdByOwner).join("\n")}`;
+        if (truncated) {
+            report = `⚠ Row cap (${ROW_CAP}/action) hit — usage is UNDER-counted in this window, so tightening proposals are unproven. Re-run with a shorter \`days\`.\n\n${report}`;
+        }
+        if (!truncated && evidence.activity.awsExec < MIN_TIGHTEN_OBSERVATIONS && evidence.usage.some((u) => u.kind === "aws-role")) {
+            report += `\n\n(AWS grants were not evaluated for tightening: ${evidence.activity.awsExec} execution(s) in the window is under the ${MIN_TIGHTEN_OBSERVATIONS}-row floor — an unused grant is only evidence when something else was used.)`;
+        }
+        // A permission review is itself an action worth a row. Counts and the window only — the row carries no proposal text, because the proposals are reproducible from the evidence and the audit log is not a place to park prose.
+        // `explain_permission` writes NO row for the opposite and equally deliberate reason: it is a what-if, and this is a review that happened.
+        await auditToolAction(bindable, "permission.fit_report", {
+            domain,
+            days,
+            direction: input.direction ?? "both",
+            rowsConsidered: evidence.rowsConsidered,
+            grantsExamined: evidence.usage.length,
+            widen: proposals.filter((p) => p.direction === "widen").length,
+            tighten: proposals.filter((p) => p.direction === "tighten").length,
+            ...(truncated ? { truncated: true } : {}),
+        });
+        return {
+            domain,
+            window: { since: window.since, until: window.until, days: window.days },
+            rowsConsidered: evidence.rowsConsidered,
+            truncated,
+            grantsExamined: evidence.usage.length,
+            repoCapabilities: capabilityRows.map((r) => ({
+                repo: r.repo,
+                capability: r.capability,
+                declared: r.declared,
+                installationSupports: (!r.fit.reported ? "unreported" : r.fit.ok ? "yes" : "no"),
+            })),
+            proposals: proposals.map((p) => ({
+                id: p.id,
+                direction: p.direction,
+                subject: p.subject,
+                summary: p.summary,
+                evidence: [...p.evidence],
+                ...(p.diff !== undefined ? { diff: p.diff.text } : {}),
+                ...(p.remedy !== undefined ? { remedy: p.remedy } : {}),
+            })),
+            report,
+        };
+    },
+});
+//# sourceMappingURL=permission_fit_report.js.map

package/dist/agent/tools/permission_fit_report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission_fit_report.js","sourceRoot":"","sources":["../../../agent/tools/permission_fit_report.ts"],"names":[],"mappings":"AAAA,kZAAkZ;AAClZ,2aAA2a;AAE3a,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,UAAU,EACV,kBAAkB,GAGnB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAEvG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAEnG;;;GAGG;AACH,MAAM,gBAAgB,GAAG;IACvB,UAAU;IACV,aAAa;IACb,cAAc;IACd,mBAAmB;IACnB,2BAA2B;IAC3B,4BAA4B;IAC5B,gBAAgB;IAChB,eAAe;CACP,CAAC;AAEX;;;GAGG;AACH,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB;;sFAEsF;AACtF,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,eAAe,UAAU,CAAC;IACxB,WAAW,EACT,m1BAAm1B;IACr1B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0EAA0E,uBAAuB,uDAAuD,CAAC;QACnN,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;KAC/G,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,uIAAuI,CAAC;QACxK,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,SAAS,EAAE,CAAC,CAAC,KAAK,CAChB,CAAC,CAAC,MAAM,CAAC;YACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2HAA2H,CAAC;YACjK,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC9B,CAAC,CACH;QACD,gBAAgB,EAAE,CAAC;aAChB,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;aAC/I,QAAQ,CAAC,kLAAkL,CAAC;QAC/L,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;KAC7E,CAAC;IACF,QAAQ,EAAE,KAAK,EAAE;IACjB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,QAAQ,GAAG,GAAsB,CAAC;QACxC,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAE/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAE5C,iOAAiO;QACjO,uGAAuG;QACvG,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAqB,OAAO;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,MAAM,EAAE,CAAC,CAAC,IAAI;YACd,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;iBACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;iBAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACvD,wFAAwF;YACxF,gGAAgG;YAChG,UAAU,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC9E,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEnE,6EAA6E;QAC7E,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,CAAC,GAAe,EAAW,EAAE;YAChD,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;YACxC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,YAAY,KAAK,MAAM,CAAC;YAChG,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC5C,OAAO,gBAAgB,CAAC,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC;QACvG,CAAC,CAAC;QAEF,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,IAAI,GAAkB,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAClG,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO;gBAAE,SAAS,GAAG,IAAI,CAAC;YAC7C,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,IAAI,YAAY,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACnH,CAAC;QAED,+RAA+R;QAC/R,iJAAiJ;QACjJ,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACnH,MAAM,cAAc,GAAiE,EAAE,CAAC;QACxF,MAAM,qBAAqB,GAAuC,EAAE,CAAC;QACrE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,cAAc,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1G,qBAAqB,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAEjG,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAChF,IAAI,MAAM,GAAG,yBAAyB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5D,MAAM,IAAI,uCAAuC,wBAAwB,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9H,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,GAAG,cAAc,OAAO,kIAAkI,MAAM,EAAE,CAAC;QAC3K,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,GAAG,wBAAwB,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;YAC5H,MAAM,IAAI,sDAAsD,QAAQ,CAAC,QAAQ,CAAC,OAAO,4CAA4C,wBAAwB,8EAA8E,CAAC;QAC9O,CAAC;QAED,+NAA+N;QAC/N,0IAA0I;QAC1I,MAAM,eAAe,CAAC,QAAQ,EAAE,uBAAuB,EAAE;YACvD,MAAM;YACN,IAAI;YACJ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,MAAM;YACpC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YACrC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,MAAM;YAC9D,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,MAAM;YAClE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;QAEH,OAAO;YACL,MAAM;YACN,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;YACvE,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,SAAS;YACT,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YACrC,gBAAgB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3C,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAgC;aAChH,CAAC,CAAC;YACH,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;gBACzB,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC,CAAC;YACH,MAAM;SACP,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/agent/tools/post_file.d.ts

@@ -0,0 +1,7 @@
+/** Infer a MIME type from a filename's extension; application/octet-stream when unknown. */
+export declare function inferContentType(filename: string): string;
+/** The full `post_file` description for an org with Blob hosting on or off. Exported for the test. */
+export declare function postFileDescription(hostingEnabled: boolean): string;
+declare const _default: unknown;
+export default _default;
+//# sourceMappingURL=post_file.d.ts.map

package/dist/agent/tools/post_file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post_file.d.ts","sourceRoot":"","sources":["../../../agent/tools/post_file.ts"],"names":[],"mappings":"AA2CA,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKzD;AAkPD,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,OAAO,GAAG,MAAM,CAYnE"}